Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/y_q6oXAcn1QTbLa0udIrMROEC1Q.roa
File: y_q6oXAcn1QTbLa0udIrMROEC1Q.roa (raw, json)
Hash identifier: AntBpXmaQ2/xqqPYuzxdq79btBpJ26XMku4sZQLLDjc=
Subject key identifier: CB:FA:BA:A1:70:1C:9F:54:13:6C:B6:B4:B9:D2:2B:31:13:84:0B:54
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 019E81F91BD848EA9571C119B27964B19045
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/y_q6oXAcn1QTbLa0udIrMROEC1Q.roa
Signing time: Mon 01 Jun 2026 06:57:26 +0000
ROA not before: Mon 01 Jun 2026 06:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 46.17.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:81:f9:1b:d8:48:ea:95:71:c1:19:b2:79:64:b1:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Jun 1 06:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbfabaa1701c9f54136cb6b4b9d22b3113840b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:bd:17:f8:50:f0:1b:17:a3:e9:09:e1:a6:
95:cc:c7:e9:59:4a:b1:6b:0c:df:42:e6:1b:eb:48:
ee:8e:d4:f5:c8:3d:dd:31:ff:71:a2:c5:ad:b2:3f:
4e:28:ea:25:75:d4:6c:32:62:04:b5:8f:89:9f:09:
4b:9d:7a:c2:26:08:0a:67:93:d7:21:b4:2b:23:4c:
18:67:2e:eb:83:6d:9b:ac:bf:69:6f:fb:fa:cb:83:
7e:97:f2:fa:74:57:50:86:39:5d:fb:90:25:fa:d7:
80:36:10:b8:e4:aa:f2:36:88:cf:71:12:bd:7e:bb:
88:f4:7b:ab:79:d5:f8:86:68:6a:57:68:58:09:c3:
79:e4:c8:4e:df:3c:d6:91:59:e5:40:01:b7:a8:3c:
15:68:3d:bd:1e:4d:4f:16:69:ec:66:59:fc:ae:87:
f0:b4:f4:79:8f:5f:33:4b:a8:f2:01:ee:85:fa:f8:
e0:60:ae:30:39:b2:ea:11:6a:67:ac:af:ff:ab:fe:
7b:72:1b:34:07:cb:2d:b9:0c:65:85:e8:e9:f8:e4:
95:6f:e6:58:81:0b:4a:63:f6:93:48:4f:58:56:88:
f8:e8:f1:ff:a0:32:ec:5f:ab:77:27:46:32:ab:ca:
29:d0:45:bb:7c:31:97:8f:cd:7b:06:28:49:4f:7e:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FA:BA:A1:70:1C:9F:54:13:6C:B6:B4:B9:D2:2B:31:13:84:0B:54
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/y_q6oXAcn1QTbLa0udIrMROEC1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.13.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7b:8a:9c:3a:06:36:45:1b:92:8d:c7:fc:79:f5:33:ba:e2:
d6:06:da:43:09:3e:a2:1b:19:1c:4c:e2:e6:30:ed:99:d1:d2:
c5:30:fe:54:9c:00:00:99:20:0d:ca:73:76:fe:ed:f5:3d:45:
6c:fb:3d:f2:57:f5:12:9a:92:a5:2e:c6:d1:64:cc:b4:af:f5:
66:5b:81:6a:1c:be:b3:f3:06:44:a9:07:cf:af:c1:16:e3:b7:
4c:e3:bb:53:44:b3:02:fe:49:73:73:8e:0a:07:9a:da:b9:6e:
8a:ed:f6:d1:d9:7a:d2:9d:5c:c1:66:39:d5:2d:f7:f0:1e:78:
bf:59:91:53:da:45:4b:20:fb:21:c6:2a:c7:30:74:ca:42:f5:
73:09:cd:f1:d6:00:d0:25:63:9d:16:e6:31:92:2f:8b:e9:6a:
27:a5:d4:ea:ce:f3:e9:b5:c1:94:ee:8d:7e:8f:79:79:0f:5c:
c4:58:a2:b7:77:0d:ae:77:62:99:25:a6:b1:67:36:fa:a5:53:
9b:60:a7:d4:2a:f0:4c:0b:57:04:7b:06:90:8a:b2:b1:45:2a:
f4:dd:43:85:51:c8:11:8c:f1:d3:59:ca:33:77:86:17:de:cc:
fb:98:3d:1f:a3:a1:0b:3c:ad:d8:38:b6:d7:52:a3:fd:11:f7:
e2:ea:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:11 2026 by rpki-client